Syslog - Generic Linux OS: Proftpd Messages

Vendor Documentation

N/A

Rule Name	Rule Type	Common Event	Classification
Proftpd Messages	Base Rule	General Information	Information
Session Closed	Sub Rule	Session Ended	Other Audit Success
Session Opened	Sub Rule	Session Started	Other Audit Success
Login Successful	Sub Rule	User Logon	Authentication Success
Proftpd Emergency Message	Sub Rule	General Emergency Log Message	Critical
Proftpd Alert Message	Sub Rule	General Alert	Critical
Proftpd Critical Message	Sub Rule	General Critical	Critical
Proftpd Error Message	Sub Rule	General Error	Error
Proftpd Warning Message	Sub Rule	General Warning	Warning
Proftpd Notice Message	Sub Rule	General Notice	Information
Proftpd Information Message	Sub Rule	General Information	Information
Proftpd Debug Message	Sub Rule	General Debug Message	Information

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
N/A	<severity>	Text/String	N/A
N/A	<tag1>	Text/String	N/A
N/A	<dname>	Text/String	N/A
N/A	<process>	Text/String	N/A
N/A	<processid>	Number	N/A
N/A	<subject>	Text/String	N/A
N/A	<tag2>	Text/String	N/A
N/A	<login>	Text/String	N/A
N/A	<object>	Text/String/Number	N/A
N/A	<sip>	IP Address	N/A
N/A	<dip>	IP Address	N/A